Css for custom profiles

[K3Nv2]

Don't know how bad this would boggle the servers but the ability to add custom css/html pages for upgraded accounts (only) would be awesome. Kind of like the old school Myspace days.

 

[Ondrashek06]

Oh, how do I miss custom CSS on profiles... where are those days?

 

[shaunj66]

Unfortunately due to possible security vulnerabilities this can't really be considered right now

 

[SylverReZ]

Unfortunately due to possible security vulnerabilities this can't really be considered right now

Any idea what security vulnerabilities can be caused by CSS?

 

[shaunj66]

Any idea what security vulnerabilities can be caused by CSS?

Good breakdown here https://css-tricks.com/css-security-vulnerabilities/

We could possibly avoid this with proper filters and validation but we don't have the time or resources to do that right now, besides current profile customisation for patrons is pretty good already IMO. What else could be added to improve it?

 

[K3Nv2]

Good breakdown here https://css-tricks.com/css-security-vulnerabilities/

We could possibly avoid this with proper filters and validation but we don't have the time or resources to do that right now, besides current profile customisation for patrons is pretty good already IMO. What else could be added to improve it?

The ability to be able to add a css editor would fancy up color selection, look of buttons, ability to perhaps add spotify widgets to check out users playlistsl or Instagram widgets, ability to move certain sections around. Of course a reset to default would be needed. It would also be a good way for those wanting to learn code to fiddle with it a bit and show off. I'm sure you guys could think of ways to block out certain class tags that would cause security risks. Just a full choice css editor for patron customization would be nice. Maybe in the future we can see this for a few dollars more so we know which user makes the transaction if they ever attempted security breaks.

 

[herbemoji]

Yeah I've seen forums with unregulated CSS and hoo boy, you can do some wacky stuff lol.

 

[JuanMena]

Good breakdown here https://css-tricks.com/css-security-vulnerabilities/

We could possibly avoid this with proper filters and validation but we don't have the time or resources to do that right now, besides current profile customisation for patrons is pretty good already IMO. What else could be added to improve it?

Pinned posts for Patrons only.